Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/QO4VVs5SI_NodctTdkKAUO1ebEc.roa
File: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (raw, json)
Hash identifier: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=
Subject key identifier: 40:EE:15:56:CE:52:23:F3:68:75:CB:53:76:42:80:50:ED:5E:6C:47
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4B4C73C88405933B52749FF48C72
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/QO4VVs5SI_NodctTdkKAUO1ebEc.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56503
IP address blocks: 185.177.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:4c:73:c8:84:05:93:3b:52:74:9f:f4:8c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ee1556ce5223f36875cb5376428050ed5e6c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:6d:41:58:30:b7:aa:08:fd:90:c1:35:a1:
f2:91:0b:59:a2:b0:28:20:cd:41:ee:e5:ac:e0:b8:
3d:74:b5:9e:5e:76:76:b2:aa:2a:31:1c:27:08:41:
0e:1c:5a:6c:e7:a8:d8:6f:ba:9c:84:2b:83:b5:98:
1e:21:95:0f:09:81:0b:31:38:d3:9f:f6:7b:bf:95:
40:7b:60:df:a2:f5:ef:50:58:6e:be:2c:82:9a:ec:
f3:33:1e:5f:0f:3c:bd:25:75:c8:81:fd:7f:84:42:
5a:bf:57:1a:2e:95:d2:28:15:7d:a0:6b:29:c6:c0:
99:90:1b:6a:33:83:db:a6:79:ed:b7:e2:c1:0b:4e:
6c:d1:d7:33:5d:87:46:0d:37:3f:5a:24:9d:94:26:
21:51:08:32:29:79:2d:77:d6:1d:23:12:a1:5d:f5:
9b:c2:b4:de:72:30:43:3f:c6:b0:86:9d:e5:0f:17:
7a:98:e1:d5:d7:3b:5f:7f:96:7c:ab:07:71:d1:b6:
61:9e:90:2f:d7:14:1a:3a:b9:8d:34:e2:86:8f:6e:
da:aa:9e:ce:41:9d:14:1a:38:01:55:c7:a8:79:37:
25:a4:e1:f9:72:c9:65:5e:0e:b9:99:2d:3a:76:67:
9c:c0:4e:f5:34:f2:fb:04:20:75:86:9b:2f:54:6a:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EE:15:56:CE:52:23:F3:68:75:CB:53:76:42:80:50:ED:5E:6C:47
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/QO4VVs5SI_NodctTdkKAUO1ebEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:3c:e5:5c:ba:b0:fe:fb:09:08:85:69:dd:42:8f:8e:25:90:
57:48:eb:dc:98:74:c2:8b:4f:e0:f9:3c:75:64:e9:3f:b1:84:
66:1f:d3:b2:5f:c4:9a:f1:4a:03:3e:a7:d3:4e:2f:64:d4:10:
14:7c:5f:d9:b4:fd:f4:ae:a9:c0:14:31:8f:df:db:c7:7b:0b:
e0:43:96:b0:2d:6b:ea:90:b4:56:3f:83:da:70:d7:57:1a:60:
b4:d7:9f:47:9d:a3:60:ca:4f:a8:cc:be:a2:b1:d1:f3:c9:28:
c2:84:a7:9a:8b:fc:d2:5c:55:d0:de:00:8e:a9:85:52:6a:71:
05:86:c5:dc:f2:69:d7:7c:82:d0:7f:0e:02:b4:76:5d:60:77:
22:71:9e:f9:85:01:06:f1:74:48:72:6f:69:eb:e0:fc:fb:75:
95:6b:13:9a:5a:51:75:cf:27:11:1d:3d:e0:77:f8:2b:53:e3:
5b:6e:8a:f8:42:62:db:68:dc:dc:97:68:04:bc:3b:c5:0a:81:
dd:58:df:d0:91:bd:99:5e:3f:67:86:f7:58:67:76:98:57:c5:
d3:12:20:f6:d4:e4:e3:b4:ac:d6:02:f9:b0:8c:36:23:1c:fd:
02:36:7d:bc:44:32:04:ca:53:5a:6e:10:c7:81:5a:1e:89:2a:
59:aa:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net